Overview

overview

10

Static

static

10

860-66-0x0...ry.exe

windows7-x64

1

860-66-0x0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    860-66-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • MD5

    627ddf6e358003c7dc65c0d7fea70d99

  • SHA1

    b493f05d33f2dc9dba3c42007815bdbe246364db

  • SHA256

    fb9efb7463c5bf64575efd134e0b3ab69e0b9ee9239742adbceea68d2ad04507

  • SHA512

    fc5648341e78daeffa47ad2cc92fc87a4cdd4fb7c40dc4a5b8033d34aca444b5394d038ad27ad4d3947df413bb30321e974df6bc37773a42c4c5aef481fc8f7e

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

https://sempersim.su/hb3/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 860-66-0x0000000000400000-0x00000000004A2000-memory.dmp
    .exe windows x86


    Headers

    Sections